This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft File: 3ILSx-tfpUPjLx7uGc01pWc8-uY.mft (raw, json) Hash identifier: qc7BSDuf9cctJ/F5igDEv64ERGuil58i6hH1Vfw0Qz8= Subject key identifier: E8:51:FE:0A:23:7E:A9:1D:CD:08:B1:19:C7:53:1D:F7:1F:02:87:A5 Authority key identifier: DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6 Certificate issuer: /CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6 Certificate serial: 019B35320B77470C9581DF0C270ED4664029 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft Manifest number: 064F Signing time: Fri 19 Dec 2025 06:00:30 +0000 Manifest this update: Fri 19 Dec 2025 06:00:30 +0000 Manifest next update: Sat 20 Dec 2025 06:00:30 +0000 Files and hashes: 1: 3ILSx-tfpUPjLx7uGc01pWc8-uY.crl (hash: BPoBG9rizI5Kidf0pSJ90yjgQsGgYiFnoxDgTnSXh0U=) 2: Mvk_oqElVRdnhvvvd2d0ON2M6O0.roa (hash: h/FNSiffcYfhZT3VlgEkLi4vidisAmOMBIjfYdnqCDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:0b:77:47:0c:95:81:df:0c:27:0e:d4:66:40:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc82d2c7eb5fa543e32f1eee19cd35a5673cfae6 Validity Not Before: Dec 19 06:00:30 2025 GMT Not After : Dec 20 06:00:30 2025 GMT Subject: CN=e851fe0a237ea91dcd08b119c7531df71f0287a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:40:12:67:85:0f:c5:6e:cc:65:2a:64:ed:93: e4:f0:b4:db:88:71:db:a5:d9:3f:b0:0c:1e:fa:38: 52:b0:59:93:2c:f1:f0:a4:77:7f:8d:ea:df:8e:11: ec:d8:c0:1d:62:45:ce:11:8b:fd:fd:a8:22:37:b6: ee:ad:b7:6c:f7:4e:73:25:20:2b:35:4f:f5:cc:60: 27:bc:19:91:a5:8c:f5:ea:22:d7:65:63:44:45:cf: 8a:2a:0f:f4:58:37:38:a2:6e:82:c9:79:c6:f5:62: 63:05:3a:56:ea:80:a7:b2:ff:5f:9f:dd:1e:87:17: f1:88:d6:6a:bc:d2:4a:6b:85:25:d4:bb:0f:c4:27: 57:26:14:ce:93:61:86:63:e3:de:7f:e1:44:5c:1f: b7:b2:91:27:d1:0f:1e:4d:94:2a:4d:17:5f:38:8f: cd:5e:fb:47:05:49:04:03:90:89:bf:ac:47:78:81: ad:73:a6:97:b8:7c:16:57:11:b2:cd:fb:ad:9f:7b: 11:77:78:18:86:fe:25:c2:ef:23:20:f0:5e:f2:60: 25:6a:7a:55:45:60:be:66:59:5e:03:62:de:d0:1b: 64:e7:e2:fb:a8:a1:d8:25:c3:6a:00:69:f5:1f:cd: 4b:63:b2:96:e4:1e:5b:26:3f:20:19:a2:ad:c9:a3: 59:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:51:FE:0A:23:7E:A9:1D:CD:08:B1:19:C7:53:1D:F7:1F:02:87:A5 X509v3 Authority Key Identifier: keyid:DC:82:D2:C7:EB:5F:A5:43:E3:2F:1E:EE:19:CD:35:A5:67:3C:FA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ILSx-tfpUPjLx7uGc01pWc8-uY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/842b5b-985c-44d7-9598-039dea50694e/1/3ILSx-tfpUPjLx7uGc01pWc8-uY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:6f:89:fd:9c:61:1e:0d:c6:b2:bb:16:d8:99:b8:2e:63:10: 14:48:d6:64:b6:99:fd:01:28:c1:d0:35:b5:e6:68:a7:76:0a: 43:78:1a:08:62:cd:7e:c5:67:f7:46:25:98:44:5e:83:9a:40: 18:7e:b8:10:1f:e4:a9:09:3e:58:43:1d:c1:ad:a2:94:6f:21: ca:0e:e9:60:9f:26:4f:fc:00:e4:b6:42:86:e3:f0:c1:fa:89: 52:dd:47:ca:35:ac:24:93:f6:44:c1:84:81:a6:59:88:75:52: db:64:96:d0:55:9a:27:59:a7:48:58:a5:26:86:26:83:ad:68: 12:17:de:5f:a1:77:11:95:a9:02:8c:40:82:70:2f:fb:34:c3: f4:78:e7:9b:4c:51:ff:b3:5f:02:59:50:c6:97:38:74:2b:a5: b9:d7:2d:c0:7c:37:58:9a:9e:6d:c5:5c:04:57:08:53:8b:f3: ba:9d:22:d7:f7:5b:db:47:8d:7b:07:92:e8:96:a2:e9:9b:29: 70:27:d0:e4:a4:c9:9c:65:43:18:d1:af:2b:5e:df:4e:b3:dc: 49:3f:17:6e:e9:80:c1:77:31:b9:40:f6:e4:d8:48:07:42:bf: b9:45:e9:ef:cb:d4:20:eb:5c:2d:4a:65:6b:44:88:5c:e0:26: 65:af:0f:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mgt3RwyVgd8MJw7UZkApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjODJkMmM3ZWI1ZmE1NDNlMzJmMWVlZTE5Y2QzNWE1Njcz Y2ZhZTYwHhcNMjUxMjE5MDYwMDMwWhcNMjUxMjIwMDYwMDMwWjAzMTEwLwYDVQQD EyhlODUxZmUwYTIzN2VhOTFkY2QwOGIxMTljNzUzMWRmNzFmMDI4N2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UASZ4UPxW7MZSpk7ZPk8LTbiHHb pdk/sAwe+jhSsFmTLPHwpHd/jerfjhHs2MAdYkXOEYv9/agiN7burbds905zJSAr NU/1zGAnvBmRpYz16iLXZWNERc+KKg/0WDc4om6CyXnG9WJjBTpW6oCnsv9fn90e hxfxiNZqvNJKa4Ul1LsPxCdXJhTOk2GGY+Pef+FEXB+3spEn0Q8eTZQqTRdfOI/N XvtHBUkEA5CJv6xHeIGtc6aXuHwWVxGyzfutn3sRd3gYhv4lwu8jIPBe8mAlanpV RWC+ZlleA2Le0Btk5+L7qKHYJcNqAGn1H81LY7KW5B5bJj8gGaKtyaNZnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhR/gojfqkdzQixGcdTHfcfAoelMB8GA1UdIwQY MBaAFNyC0sfrX6VD4y8e7hnNNaVnPPrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0lMU3gtdGZwVVBqTHg3dUdjMDFwV2M4LXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84NDJiNWItOTg1Yy00NGQ3LTk1OTgt MDM5ZGVhNTA2OTRlLzEvM0lMU3gtdGZwVVBqTHg3dUdjMDFwV2M4LXVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84NDJiNWItOTg1Yy00NGQ3LTk1OTgtMDM5ZGVhNTA2OTRl LzEvM0lMU3gtdGZwVVBqTHg3dUdjMDFwV2M4LXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKW+J/Zxh Hg3GsrsW2Jm4LmMQFEjWZLaZ/QEowdA1teZop3YKQ3gaCGLNfsVn90YlmEReg5pA GH64EB/kqQk+WEMdwa2ilG8hyg7pYJ8mT/wA5LZChuPwwfqJUt1HyjWsJJP2RMGE gaZZiHVS22SW0FWaJ1mnSFilJoYmg61oEhfeX6F3EZWpAoxAgnAv+zTD9Hjnm0xR /7NfAllQxpc4dCuludctwHw3WJqebcVcBFcIU4vzup0i1/db20eNeweS6Jai6Zsp cCfQ5KTJnGVDGNGvK17fTrPcST8XbumAwXcxuUD25NhIB0K/uUXp78vUIOtcLUpl a0SIXOAmZa8P7Q== -----END CERTIFICATE-----Generated at Fri Dec 19 08:27:29 2025 by rpki-client